agent-security-lens 0.1.2 → 0.1.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (8) hide show
  1. package/.mcp/server.json +4 -4
  2. package/CHANGELOG.md +7 -0
  3. package/README.md +28 -2
  4. package/RELEASE-MANIFEST.json +23 -18
  5. package/docs/agent-install.md +83 -0
  6. package/llms.txt +1 -0
  7. package/package.json +11 -2
  8. package/server.json +4 -4
package/.mcp/server.json CHANGED
@@ -1,19 +1,19 @@
1
1
  {
2
2
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
3
3
  "name": "io.github.professor2k8/agent-security-lens",
4
- "title": "AgentSecurityLens",
5
- "description": "Security intelligence MCP for agents to review MCPs, Skills and tools before installation.",
4
+ "title": "Agent Security Lens (AgentSecurityLens)",
5
+ "description": "Safe-install and trust-check MCP for agents to review MCPs, Skills and tools before installation.",
6
6
  "status": "active",
7
7
  "repository": {
8
8
  "url": "https://github.com/professor2k8/agent-security-lens",
9
9
  "source": "github"
10
10
  },
11
- "version": "0.1.2",
11
+ "version": "0.1.3",
12
12
  "packages": [
13
13
  {
14
14
  "registryType": "npm",
15
15
  "identifier": "agent-security-lens",
16
- "version": "0.1.2",
16
+ "version": "0.1.3",
17
17
  "transport": {
18
18
  "type": "stdio"
19
19
  },
package/CHANGELOG.md CHANGED
@@ -1,5 +1,12 @@
1
1
  # Changelog
2
2
 
3
+ ## 0.1.3
4
+
5
+ - Improve agent-first installation copy in the README.
6
+ - Add a dedicated Agent install guide with required pre-install review flow.
7
+ - Expand npm discovery keywords for safe install, trust check, MCP security and Skill security searches.
8
+ - Update the MCP Registry manifest description for safe-install and trust-check discovery.
9
+
3
10
  ## 0.1.2
4
11
 
5
12
  - Add public security intelligence index for agents and package readers.
package/README.md CHANGED
@@ -6,6 +6,32 @@ Before an agent installs or enables an MCP, Skill, tool, prompt bundle, workflow
6
6
 
7
7
  ASL is not a malware verdict tool. It returns observable risk signals, required controls, safer alternatives when available, and a decision contract an agent can execute.
8
8
 
9
+ ## Agent Quick Install
10
+
11
+ Add ASL as a pre-install trust check MCP:
12
+
13
+ ```json
14
+ {
15
+ "mcpServers": {
16
+ "agent-security-lens": {
17
+ "command": "npx",
18
+ "args": ["-y", "agent-security-lens"]
19
+ }
20
+ }
21
+ }
22
+ ```
23
+
24
+ Then give the agent this policy:
25
+
26
+ ```text
27
+ Before installing or enabling any MCP, Skill, tool, prompt bundle,
28
+ workflow or memory component, call AgentSecurityLens review_before_install.
29
+ Follow agent_decision_contract and agent_actions exactly.
30
+ Never submit private source code, secrets, tokens, cookies or file contents.
31
+ ```
32
+
33
+ See [Agent install guide](docs/agent-install.md) for Claude Desktop, Cursor, Codex-style and generic MCP configurations.
34
+
9
35
  ## Public Intelligence
10
36
 
11
37
  The public package includes a reviewed baseline so agents can still make conservative decisions when the cloud API is unavailable.
@@ -17,7 +43,7 @@ The public package includes a reviewed baseline so agents can still make conserv
17
43
 
18
44
  The online ASL intelligence API serves the current expanded catalog. The npm package intentionally does not ship the complete private intelligence database.
19
45
 
20
- ## Install
46
+ ## Basic MCP Config
21
47
 
22
48
  ```json
23
49
  {
@@ -127,7 +153,7 @@ Agents must execute the structured fields rather than infer policy from prose.
127
153
 
128
154
  ASL evaluates observable behavior and installation context. It does not label a component malicious without evidence.
129
155
 
130
- The v0.1.0 public fallback contains 30 strict reviewed records and 20 curated fallback baselines. Automatic assessments are available through the online service but cannot authorize automatic installation.
156
+ The public fallback contains strict reviewed records and curated fallback baselines. Automatic assessments are available through the online service but cannot authorize automatic installation.
131
157
 
132
158
  ## Privacy
133
159
 
package/RELEASE-MANIFEST.json CHANGED
@@ -1,8 +1,8 @@
1
1
  {
2
2
  "schema_version": "0.1.0",
3
3
  "package": "agent-security-lens",
4
- "version": "0.1.2",
5
- "generated_at": "2026-06-21T15:24:09.597Z",
4
+ "version": "0.1.3",
5
+ "generated_at": "2026-06-22T08:01:37.097Z",
6
6
  "source": "ASL verified public release exporter",
7
7
  "files": [
8
8
  {
@@ -27,13 +27,13 @@
27
27
  },
28
28
  {
29
29
  "path": ".github/workflows/ci.yml",
30
- "bytes": 444,
31
- "sha256": "86ac5975ffafc51f4045fbe6cb9959f938fa52c0ed59d87f294d8d701ab01a50"
30
+ "bytes": 525,
31
+ "sha256": "7625c8b17057d0d64234c7e8c49894d1d4ca632c9a44b8d48f871df1d626c0f1"
32
32
  },
33
33
  {
34
34
  "path": ".github/workflows/publish-mcp-registry.yml",
35
- "bytes": 1074,
36
- "sha256": "fd2bed721b5fdf3f1e8b09656b7aac46e333a827bfc7ea6d7756b1bcb2499cd2"
35
+ "bytes": 1272,
36
+ "sha256": "46dd8937b9a36517604fff2a9f6f29ed22a115536719189a01ef94edddc1687c"
37
37
  },
38
38
  {
39
39
  "path": ".gitignore",
@@ -42,8 +42,8 @@
42
42
  },
43
43
  {
44
44
  "path": ".mcp/server.json",
45
- "bytes": 1287,
46
- "sha256": "befc15416fd0b04b1cca08796e3b98c9062ffe4717791d570e9c452d132acfc0"
45
+ "bytes": 1316,
46
+ "sha256": "cff25d18a7c6d1259d400599537de259731224109f4cf16129cd4984027b16ab"
47
47
  },
48
48
  {
49
49
  "path": ".npmignore",
@@ -52,8 +52,8 @@
52
52
  },
53
53
  {
54
54
  "path": "CHANGELOG.md",
55
- "bytes": 1261,
56
- "sha256": "8bfa163446c5354f78427edd24c8419cc435ee024913ff08266f75a59cd6c651"
55
+ "bytes": 1600,
56
+ "sha256": "990eb963697607ee08be8f8a24ba24f78c0e4ce38c510509b20f3920cdc7fa91"
57
57
  },
58
58
  {
59
59
  "path": "CODE_OF_CONDUCT.md",
@@ -77,8 +77,8 @@
77
77
  },
78
78
  {
79
79
  "path": "README.md",
80
- "bytes": 5829,
81
- "sha256": "e4bf0eacff185b9bdb2314b66ac7a2432b35f51ef8c7b010231bdc08809f7f35"
80
+ "bytes": 6481,
81
+ "sha256": "0e48df39c037cc156db7b958aa7d8dab70f6c212a984a93c1f3f2f7a27944ab6"
82
82
  },
83
83
  {
84
84
  "path": "SECURITY.md",
@@ -120,6 +120,11 @@
120
120
  "bytes": 4654,
121
121
  "sha256": "d060bad4b4830a98013fed6dd23051c271dd92317873dcabbde01e5ff1f840b9"
122
122
  },
123
+ {
124
+ "path": "docs/agent-install.md",
125
+ "bytes": 2505,
126
+ "sha256": "239d8c5fa18ce0fdd1066115e34a6409f7f9d1dc4c486edba7887f7bc752ff2b"
127
+ },
123
128
  {
124
129
  "path": "docs/asl-agent-component-safety-standard-v0.2.md",
125
130
  "bytes": 3044,
@@ -202,13 +207,13 @@
202
207
  },
203
208
  {
204
209
  "path": "llms.txt",
205
- "bytes": 1727,
206
- "sha256": "adcbc320f9c5e13e4b71b57f47337d06008fdbfe567b39902643b9a3d1c9e010"
210
+ "bytes": 1751,
211
+ "sha256": "b53f08e07a8a76e5c0054c240dd3ff7a9e8e006b02ae1a897bb4117e97c7f85c"
207
212
  },
208
213
  {
209
214
  "path": "package.json",
210
- "bytes": 1973,
211
- "sha256": "e2227a4030693158a795e445a5330956eb96e003eeba7a7c2ba5e1e2b0b70e9a"
215
+ "bytes": 2156,
216
+ "sha256": "2fb0be3924a8d9b20e70e92818f03f078a2f75baed9e2fd780b0accb1300d025"
212
217
  },
213
218
  {
214
219
  "path": "profiles/generic-agent/profile.json",
@@ -337,8 +342,8 @@
337
342
  },
338
343
  {
339
344
  "path": "server.json",
340
- "bytes": 1287,
341
- "sha256": "befc15416fd0b04b1cca08796e3b98c9062ffe4717791d570e9c452d132acfc0"
345
+ "bytes": 1316,
346
+ "sha256": "cff25d18a7c6d1259d400599537de259731224109f4cf16129cd4984027b16ab"
342
347
  },
343
348
  {
344
349
  "path": "src/assessment/assess.mjs",
package/docs/agent-install.md ADDED
@@ -0,0 +1,83 @@
1
+ # AgentSecurityLens Agent Install Guide
2
+
3
+ AgentSecurityLens is a pre-install security MCP. Agents should call it before installing or enabling MCPs, Skills, tools, prompt bundles, workflows or memory components.
4
+
5
+ ## Standard MCP Config
6
+
7
+ Use this config in MCP-compatible clients:
8
+
9
+ ```json
10
+ {
11
+ "mcpServers": {
12
+ "agent-security-lens": {
13
+ "command": "npx",
14
+ "args": ["-y", "agent-security-lens"]
15
+ }
16
+ }
17
+ }
18
+ ```
19
+
20
+ Node.js 20 or newer is required.
21
+
22
+ ## Agent Policy
23
+
24
+ Add this instruction to the agent or workspace policy:
25
+
26
+ ```text
27
+ Before installing or enabling any MCP, Skill, tool, prompt bundle,
28
+ workflow or memory component, call AgentSecurityLens review_before_install.
29
+ Follow agent_decision_contract and agent_actions exactly.
30
+ Never submit private source code, secrets, tokens, cookies or file contents.
31
+ ```
32
+
33
+ ## Required Agent Flow
34
+
35
+ 1. Connect to the `agent-security-lens` MCP server.
36
+ 2. Call `get_install_policy` once.
37
+ 3. Before any install or enable action, call `review_before_install`.
38
+ 4. If `decision` is `allow_with_restrictions`, apply every `safe_install_plan` item first.
39
+ 5. If `decision` is `ask_user` or `avoid`, stop automatic installation.
40
+ 6. If the component is unknown, submit only public metadata with `submit_unknown_component`.
41
+ 7. After acting, call `report_install_outcome`.
42
+
43
+ ## Decision Rules
44
+
45
+ | Decision | Agent behavior |
46
+ | --- | --- |
47
+ | `allow` | Install only from the recorded source and version, then report outcome. |
48
+ | `allow_with_restrictions` | Apply restrictions first, then install and report outcome. |
49
+ | `ask_user` | Do not run the install command automatically. Ask the user. |
50
+ | `avoid` | Do not install automatically. Prefer reviewed alternatives. |
51
+
52
+ Unknown or incompletely reviewed components do not receive automatic-install authorization.
53
+
54
+ ## Review Request Example
55
+
56
+ ```json
57
+ {
58
+ "component_name": "filesystem",
59
+ "component_type": "mcp",
60
+ "source_url": "https://github.com/modelcontextprotocol/servers",
61
+ "install_command": "npx -y @modelcontextprotocol/server-filesystem .",
62
+ "planned_use": "Read and edit project files.",
63
+ "requested_permissions": ["filesystem-read", "filesystem-write"],
64
+ "submit_if_unknown": true
65
+ }
66
+ ```
67
+
68
+ ## Online Intelligence
69
+
70
+ The MCP uses the public ASL cloud intelligence endpoint by default:
71
+
72
+ ```text
73
+ ASL_API_URL=https://agentsecuritylens-api.agentsecuritylens.workers.dev
74
+ ```
75
+
76
+ For offline fallback mode:
77
+
78
+ ```text
79
+ ASL_MODE=local
80
+ ```
81
+
82
+ Local mode includes only the public fallback intelligence and conservative static rules.
83
+
package/llms.txt CHANGED
@@ -6,6 +6,7 @@ Primary use:
6
6
  Before installing or enabling any MCP, Skill, tool, prompt bundle or workflow, call the AgentSecurityLens MCP tool `review_before_install`.
7
7
 
8
8
  Public intelligence files:
9
+ - docs/agent-install.md
9
10
  - docs/public-intelligence/asl-public-security-index-v0.1.md
10
11
  - docs/public-intelligence/top-mcp-security-signals-v0.1.md
11
12
  - docs/public-intelligence/top-skill-security-signals-v0.1.md
package/package.json CHANGED
@@ -1,9 +1,9 @@
1
1
  {
2
2
  "name": "agent-security-lens",
3
- "version": "0.1.2",
3
+ "version": "0.1.3",
4
4
  "private": false,
5
5
  "mcpName": "io.github.professor2k8/agent-security-lens",
6
- "description": "Agent-facing security MCP that queries ASL intelligence before autonomous agents install tools.",
6
+ "description": "Safe-install and trust-check MCP for autonomous agents before they install MCPs, Skills or tools.",
7
7
  "type": "module",
8
8
  "license": "Apache-2.0",
9
9
  "repository": {
@@ -20,6 +20,15 @@
20
20
  "ai-agent",
21
21
  "agent-security",
22
22
  "security",
23
+ "safe-install",
24
+ "trust-check",
25
+ "mcp-security",
26
+ "skill-security",
27
+ "ai-security",
28
+ "agent-guard",
29
+ "install-guard",
30
+ "security-audit",
31
+ "tool-safety",
23
32
  "trust-score",
24
33
  "agent-tools"
25
34
  ],
package/server.json CHANGED
@@ -1,19 +1,19 @@
1
1
  {
2
2
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
3
3
  "name": "io.github.professor2k8/agent-security-lens",
4
- "title": "AgentSecurityLens",
5
- "description": "Security intelligence MCP for agents to review MCPs, Skills and tools before installation.",
4
+ "title": "Agent Security Lens (AgentSecurityLens)",
5
+ "description": "Safe-install and trust-check MCP for agents to review MCPs, Skills and tools before installation.",
6
6
  "status": "active",
7
7
  "repository": {
8
8
  "url": "https://github.com/professor2k8/agent-security-lens",
9
9
  "source": "github"
10
10
  },
11
- "version": "0.1.2",
11
+ "version": "0.1.3",
12
12
  "packages": [
13
13
  {
14
14
  "registryType": "npm",
15
15
  "identifier": "agent-security-lens",
16
- "version": "0.1.2",
16
+ "version": "0.1.3",
17
17
  "transport": {
18
18
  "type": "stdio"
19
19
  },